[xwiki-users] XWiki User Administration

[Sergiu Dumitriu]

Robert Hercz wrote:
> Hi,
> 
> We've just installed XWiki Enterprise to get a look'n'feel and see if this
> is something we should base our corporate InfoCenter on, for both internal
> and external use (we are a telecommunications operator in Norway).
> 
> User Rights administration is important, as is hacker-security, as there
> will be sensitive documents both as attachments and in wiki pages.
> 
> We have established Spaces in XWiki and assigned individual user rights to
> Spaces.
> 
> In order to fully understand XWiki and its potentials, I have some questions
> I hope someone can answer:
> 
> 1) Is user administration and group membership a fully manual process, i.e.
> the admin needs to know the user's login ID and manually create an entry and
> type in this user ID, for this to work, or are there any utilities which
> allows me to select users from a list and attach dependencies to Groups (or
> the other way, i.e. to select Group and move users into a list)?

One way is to integrate it with LDAP, if you already have one active in 
your intranet.

If you have just a list of users in a CSV, it's easy to write a script 
that automatically creates the user accounts based on that file (I used 
something like that for a site).

> 2) Is it possible to have some extra security which is IP-dependent, i.e.
> have certain Spaces available only to internal IP-addresses (10.10.x.x and
> 192.168.x.x)?

There isn't anything like this by default, but it is very easy (for a 
programmer) to write a plugin that checks the IP of the client and 
throws an exception if certain restrictions aren't met.


Speaking of security, as long as you configure the rights properly, 
there's no risk (assuming the admin passwords are safe enough not to be 
cracked).

If you need help with configuring the security, or anything related to 
the setup, you can contact the XWiki company (www.xwiki.com) for some 
expertise.

Sergiu